Plant and Process Control Rooms

An operator who is acknowledging alarms is not watching the process.

Alarm lists grow the way firewall rules grow: every incident adds one, nobody removes any, and within a few years the flood is the normal condition. The operator adapts by acknowledging without reading, which is a rational response to the design and a dangerous one.

Where SECCOM stops. Safety-instrumented systems remain with the process safety authority. SECCOM designs around them and does not place anything in their path.